walpromo[.]store

This domain is flagged as a brand impersonation targeting Walmart. Registered on May 17, 2026, through Ultahost, Inc., the domain resolves to IP 159.100.6.19 located in Germany, also associated with Ultahost Inc. The page title is 'Walmart - 20% Offer', consistent with a phishing attempt designed to lure visitors with a discount offer. Infrastructure analysis shows nameservers ns1 through ns4.ultahost.com, and MX records configured to route email through the domain itself, suggesting potential for credential harvesting via email. An SSL certificate from DigiCert Inc / RapidSSL TLS RSA CA G1 is present, which is typical for fraudulent sites to appear legitimate. The domain has a Gridinsoft trust score of 25/100, indicating low trustworthiness. VirusTotal reports 6 out of 92 security vendors flagging the domain as malicious, and it appears on one security blocklist. AlienVault OTX includes it in one threat intelligence pulse. The domain is currently active and has been blocked by PhishDestroy, but defenders should treat it as an active threat. Unknown factors include the specific landing page content beyond the title, and whether any data has already been collected from victims. Defenders should ensure the domain is added to all perimeter blocklists, monitor for related subdomains, and warn users about unsolicited Walmart discount offers originating from this domain.